---
typeId: req
recordId: benac-trust-004
fields:
  title: Signatures are evidence, not authority
  statement: Package signatures, storage receipts, compute results, attestations,
    and name bindings shall not automatically grant execution, storage, compute,
    decryption, or capability permission unless local policy explicitly treats
    specified claims from specified principals as sufficient for a defined trust
    scope.
  rationale: Decentralized trust is local.
  verification: Signed package or storage offer remains inactive without matching
    local policy.
  testable: true
  status: draft
  area: BENAC-TRUST
  sourceDocument: /home/johnb/Downloads/benac_syrs_v0_4_integrated_authentication.md
  sourceVersion: v0.4
  sourceSections:
    - 10.8 Trust and capability governance
  order: 91
---
